Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/df38731f-5b5c-3bbf-97f4-c410cb41b5af.roa
File:                     df38731f-5b5c-3bbf-97f4-c410cb41b5af.roa (raw, json)
Hash identifier:          5ttpHRF0DoXtTwmrVG8YTqnu9egJ1Zt6nwHkBZnQ5Fc=
Subject key identifier:   D0:2A:88:A2:52:77:6C:EA:53:17:F8:B3:0F:FD:4D:D6:8D:3D:BE:67
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584D09737E41A0F94716B466A9C0
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/df38731f-5b5c-3bbf-97f4-c410cb41b5af.roa
Signing time:             Mon 02 Mar 2026 17:16:33 +0000
ROA not before:           Mon 02 Mar 2026 17:16:33 +0000
ROA not after:            Sun 31 May 2026 16:16:33 +0000
asID:                     395661
IP address blocks:        2607:bc40:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:73:7e:41:a0:f9:47:16:b4:66:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Mar  2 17:16:33 2026 GMT
            Not After : May 31 16:16:33 2026 GMT
        Subject: CN=dffcffde-7321-4079-8ee2-ba10d6eaa125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:bf:60:bb:e1:72:ce:db:90:e2:c6:f8:4b:
                    c4:90:37:30:2e:74:13:c4:d5:b3:e1:a7:54:9b:3d:
                    8c:6e:9e:50:0b:f4:cf:18:19:a5:90:a8:aa:10:ee:
                    27:77:a9:5d:a1:1c:82:bf:b4:8b:c9:52:cc:80:7e:
                    49:e1:2b:36:aa:0c:df:f5:93:34:02:0c:37:1f:28:
                    7c:e3:c0:9d:95:18:8d:ca:b1:d6:8d:55:6c:71:d7:
                    27:d5:92:03:8e:1c:ae:e6:2f:25:6c:de:88:fc:c3:
                    62:c1:62:49:03:ba:ed:af:75:64:e4:52:bf:3d:03:
                    b0:c6:c3:0a:d3:3d:28:19:87:7d:f7:18:f3:61:40:
                    a2:03:da:c2:91:68:6b:81:30:9d:9c:66:6d:f8:f2:
                    e4:8a:1c:ef:e1:87:cb:29:f2:db:04:20:51:88:92:
                    8d:68:c9:44:56:71:8f:a6:84:26:34:91:e0:bb:a1:
                    ac:77:cd:0c:37:ee:d9:f1:6a:7d:67:c9:53:87:07:
                    15:c3:cc:13:a5:47:98:8c:6a:88:f5:d8:c7:43:dd:
                    d1:0e:fd:f0:33:e4:44:91:bd:34:53:2a:88:8b:37:
                    f1:fd:f0:74:2e:d7:33:7a:90:51:76:87:17:ad:b1:
                    a1:6c:8c:85:06:ee:f0:d1:d7:34:68:0a:04:c5:df:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:88:A2:52:77:6C:EA:53:17:F8:B3:0F:FD:4D:D6:8D:3D:BE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/df38731f-5b5c-3bbf-97f4-c410cb41b5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:29:bf:b2:75:32:ce:b9:13:8d:41:88:b0:c3:8b:fe:91:62:
         7f:a2:0c:47:b0:61:cc:5f:85:29:c8:4a:f7:3e:4f:21:b4:cd:
         00:e0:01:ae:4a:bd:97:ce:e4:20:7e:58:1b:ea:d4:5c:ec:5b:
         73:42:de:cc:0d:08:40:b3:79:ea:76:68:18:38:34:6d:43:43:
         e8:26:f2:64:8c:c3:d0:cd:a5:4d:8a:a4:fe:60:66:66:30:36:
         68:3f:d6:c0:b4:d5:3a:41:cc:66:55:c0:7e:d4:12:82:80:6d:
         67:ca:81:0b:46:25:a6:5e:fe:84:f9:cd:83:90:03:d7:5d:f2:
         fb:bb:41:07:ad:db:2e:20:41:bc:06:72:b8:bd:4d:93:ac:ff:
         8c:4a:b1:a7:47:8d:c5:64:fa:20:ce:8d:fa:ca:a4:ce:1f:8e:
         95:98:8f:f4:ee:db:7b:85:24:37:0f:55:92:04:7c:e3:50:19:
         38:79:c9:69:e7:8e:c7:28:36:54:8f:4d:2a:b1:ed:40:ef:c8:
         d8:c6:8d:9b:97:30:0d:90:72:e9:f5:5f:1e:83:0e:e6:26:d9:
         06:67:d5:ce:cc:93:d9:e4:52:68:49:a3:d0:3e:97:21:ea:b4:
         4d:b7:1a:38:1f:4e:39:5a:7f:b6:ba:e3:0d:64:df:1f:bd:8a:
         27:9c:50:0d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Jc35BoPlHFrRmqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI2MDMwMjE3MTYzM1oXDTI2MDUzMTE2MTYzM1owLzEtMCsGA1UEAxMk
ZGZmY2ZmZGUtNzMyMS00MDc5LThlZTItYmExMGQ2ZWFhMTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8K/YLvhcs7bkOLG+EvEkDcwLnQTxNWz4adU
mz2Mbp5QC/TPGBmlkKiqEO4nd6ldoRyCv7SLyVLMgH5J4Ss2qgzf9ZM0Agw3Hyh8
48CdlRiNyrHWjVVscdcn1ZIDjhyu5i8lbN6I/MNiwWJJA7rtr3Vk5FK/PQOwxsMK
0z0oGYd99xjzYUCiA9rCkWhrgTCdnGZt+PLkihzv4YfLKfLbBCBRiJKNaMlEVnGP
poQmNJHgu6Gsd80MN+7Z8Wp9Z8lThwcVw8wTpUeYjGqI9djHQ93RDv3wM+REkb00
UyqIizfx/fB0LtczepBRdocXrbGhbIyFBu7w0dc0aAoExd8QXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNAqiKJSd2zqUxf4sw/9TdaNPb5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvZGYzODczMWYtNWI1Yy0z
YmJmLTk3ZjQtYzQxMGNiNDFiNWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge8QAEE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFcpv7J1Ms65E41BiLDDi/6RYn+iDEewYcxfhSnISvc+TyG0zQDg
Aa5KvZfO5CB+WBvq1FzsW3NC3swNCECzeep2aBg4NG1DQ+gm8mSMw9DNpU2KpP5g
ZmYwNmg/1sC01TpBzGZVwH7UEoKAbWfKgQtGJaZe/oT5zYOQA9dd8vu7QQet2y4g
QbwGcri9TZOs/4xKsadHjcVk+iDOjfrKpM4fjpWYj/Tu23uFJDcPVZIEfONQGTh5
yWnnjscoNlSPTSqx7UDvyNjGjZuXMA2Qcun1Xx6DDuYm2QZn1c7Mk9nkUmhJo9A+
lyHqtE23GjgfTjlaf7a64w1k3x+9iiecUA0=
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:00:44 2026 by rpki-client